webapps/etherpad > lint
This commit is contained in:
parent
18c30b72c1
commit
c219b37aa6
|
@ -4,7 +4,7 @@
|
|||
- name: Install main system dependencies
|
||||
ansible.builtin.apt:
|
||||
name: "{{ etherpad_system_dep }}"
|
||||
update_cache: yes
|
||||
update_cache: true
|
||||
|
||||
- name: Install pnpm (via npm)
|
||||
ansible.builtin.command:
|
||||
|
@ -15,7 +15,7 @@
|
|||
path: /usr/local/lib/node_modules/
|
||||
state: directory
|
||||
mode: o+rx
|
||||
recurse: yes
|
||||
recurse: true
|
||||
|
||||
- name: Add UNIX account
|
||||
ansible.builtin.user:
|
||||
|
@ -30,7 +30,7 @@
|
|||
ansible.builtin.mysql_user:
|
||||
name: "{{ etherpad_db_user }}"
|
||||
password: "{{ etherpad_db_password }}"
|
||||
priv: "{{ etherpad_db_name }}.*:{{privileges |default('SELECT,INSERT,UPDATE,DELETE,CREATE,DROP,INDEX,ALTER,CREATE TEMPORARY TABLES')}}"
|
||||
priv: "{{ etherpad_db_name }}.*:{{ privileges | default('SELECT,INSERT,UPDATE,DELETE,CREATE,DROP,INDEX,ALTER,CREATE TEMPORARY TABLES') }}"
|
||||
update_password: on_create
|
||||
|
||||
- name: Clone etherpad repo (git)
|
||||
|
@ -38,7 +38,7 @@
|
|||
repo: "{{ etherpad_git_url }}"
|
||||
dest: "~/etherpad-lite/"
|
||||
version: "{{ etherpad_git_version | default(omit) }}"
|
||||
update: yes
|
||||
update: true
|
||||
force: true
|
||||
umask: '0022'
|
||||
become_user: "{{ service }}"
|
||||
|
@ -72,8 +72,8 @@
|
|||
- name: Enable systemd unit
|
||||
ansible.builtin.systemd:
|
||||
name: "{{ service }}.service"
|
||||
enabled: yes
|
||||
daemon_reload: yes
|
||||
enabled: true
|
||||
daemon_reload: true
|
||||
notify:
|
||||
- restart etherpad
|
||||
|
||||
|
@ -84,10 +84,11 @@
|
|||
|
||||
- name: Check if SSL certificate is present and register result
|
||||
ansible.builtin.stat:
|
||||
path: "/etc/letsencrypt/live/{{ etherpad_domains |first }}/fullchain.pem"
|
||||
path: "/etc/letsencrypt/live/{{ etherpad_domains | first }}/fullchain.pem"
|
||||
register: ssl
|
||||
|
||||
- name: Generate certificate only if required (first time)
|
||||
when: ssl.stat.exists != true
|
||||
block:
|
||||
- name: Template vhost without SSL for successfull LE challengce
|
||||
ansible.builtin.template:
|
||||
|
@ -100,6 +101,7 @@
|
|||
state: link
|
||||
notify:
|
||||
- reload nginx
|
||||
|
||||
- name: Flush handlers
|
||||
ansible.builtin.meta: flush_handlers
|
||||
- name: Make sure /var/lib/letsencrypt exists and has correct permissions
|
||||
|
@ -107,19 +109,22 @@
|
|||
path: /var/lib/letsencrypt
|
||||
state: directory
|
||||
mode: '0755'
|
||||
|
||||
- name: Generate certificate with certbot
|
||||
ansible.builtin.command:
|
||||
cmd: certbot certonly --webroot --webroot-path /var/lib/letsencrypt --non-interactive --agree-tos --email {{ etherpad_certbot_admin_email }} -d {{ etherpad_domains |first }}
|
||||
cmd: certbot certonly --webroot --webroot-path /var/lib/letsencrypt --non-interactive --agree-tos --email {{ etherpad_certbot_admin_email }} -d {{ etherpad_domains | first }}
|
||||
|
||||
- name: Create the ssl dir if needed
|
||||
ansible.builtin.file:
|
||||
path: /etc/nginx/ssl
|
||||
state: directory
|
||||
mode: '0750'
|
||||
|
||||
- name: Template ssl bloc for nginx vhost
|
||||
ansible.builtin.template:
|
||||
src: "ssl.conf.j2"
|
||||
dest: "/etc/nginx/ssl/{{ etherpad_domains |first }}.conf"
|
||||
when: ssl.stat.exists != true
|
||||
|
||||
|
||||
- name: (Re)check if SSL certificate is present and register result
|
||||
ansible.builtin.stat:
|
||||
|
|
|
@ -17,7 +17,7 @@
|
|||
repo: "{{ etherpad_git_url }}"
|
||||
dest: "~/etherpad-lite/"
|
||||
version: "{{ etherpad_git_version }}"
|
||||
update: yes
|
||||
update: true
|
||||
force: true
|
||||
become_user: "{{ service }}"
|
||||
|
||||
|
|
Loading…
Reference in a new issue